POPIA Applies to Domestic Employers
The Protection of Personal Information Act (POPIA) came into full effect in South Africa in July 2021. Most people associate POPIA with large businesses, but the Act applies to any person who collects, stores, uses or shares personal information about individuals — including domestic employers who keep employment records about their household workers. As a domestic employer, you collect significant personal information: your worker's full name, ID number, date of birth, address, bank account details and employment history. POPIA governs how this information must be handled.
Key Obligations for Domestic Employers Under POPIA
- Collect only what you need — only collect personal information necessary for employment purposes
- Get consent — ensure your employee understands what information you hold and how it is used
- Store it securely — employment records must be stored securely, not accessible to others in the household
- Don't share unnecessarily — do not share your employee's personal information with third parties without good reason
- Retain only as long as necessary — payslips must be kept for three years under SD7; dispose of records securely after that period
ID Numbers and Banking Details
The most sensitive personal information you hold is your worker's ID number and banking details. These must be stored securely — keeping an ID copy in a filing cabinet accessible to others, or banking details in an unprotected spreadsheet, is problematic under POPIA.
Include a POPIA Clause in Your Contract
Your employment contract should include a brief clause confirming that the employee's personal information will be collected and used only for employment purposes, stored securely and not shared with third parties without consent.
When Your Domestic Worker Requests Access to Their Personal Information
POPIA gives individuals the right to request access to personal information that an organisation or person holds about them. This means your domestic worker has the right to ask you what personal information you hold about them and to request a copy of it. While this right is more commonly exercised against large organisations, the right applies equally in domestic employment. Being able to produce accurate, organised personal records when requested demonstrates good compliance practice and reduces the risk of disputes about what information is held.
Data Breach Obligations Under POPIA
POPIA also creates an obligation to notify the Information Regulator and the affected individual if a data breach occurs — meaning if personal information about your domestic worker is accessed, stolen or lost without authorisation. For domestic employers, a relevant example would be if documents containing your worker's ID number and banking details were stolen from your home. While the formal data breach notification process is more practically relevant for larger organisations, the underlying obligation to handle personal information with appropriate care applies equally to domestic employers.
Secure Digital Storage
MyHelper's payroll platform stores all employment records, payslips and personal information securely on encrypted servers, compliant with applicable data protection principles. Manage your domestic worker's information responsibly from R249 per month. Start at myhelpersubmit.co.za.
Need help with compliance?
MyHelper makes UIF, COID, payslips and labour law compliance simple — from R249/month.